→
+# 3. Collapse whitespace
+normalize_html() {
+ local html="$1"
+ echo "$html" \
+ | sed -E 's/]*type="hidden"[^>]*>//g' \
+ | sed -E 's/<(\/?)([a-zA-Z][a-zA-Z0-9]*)[^>]*>/<\1\2>/g' \
+ | tr -s '[:space:]' ' ' \
+ | sed 's/^ //;s/ $//'
+}
+
+# hash_html JSON_RESPONSE
+# Extract .renderedHTML, normalize, sha256sum.
+hash_html() {
+ local json="$1"
+ local html
+ html=$(echo "$json" | jq -r '.renderedHTML // empty')
+ if [[ -z "$html" ]]; then
+ echo "ERROR: No renderedHTML in response" >&2
+ return 1
+ fi
+ normalize_html "$html" | shasum -a 256 | awk '{print $1}'
+}
+
+# ── Assertions ────────────────────────────────────────────────
+
+# assert_eq ACTUAL EXPECTED DESCRIPTION
+assert_eq() {
+ local actual="$1" expected="$2" desc="$3"
+ (( _TOTAL++ ))
+ if [[ "$actual" == "$expected" ]]; then
+ (( _PASS++ ))
+ printf "${GREEN}ok %d${NC} - %s\n" "$_TOTAL" "$desc"
+ else
+ (( _FAIL++ ))
+ printf "${RED}not ok %d${NC} - %s\n" "$_TOTAL" "$desc"
+ printf " expected: %s\n got: %s\n" "$expected" "$actual"
+ fi
+}
+
+# assert_ne ACTUAL UNEXPECTED DESCRIPTION
+assert_ne() {
+ local actual="$1" unexpected="$2" desc="$3"
+ (( _TOTAL++ ))
+ if [[ "$actual" != "$unexpected" ]]; then
+ (( _PASS++ ))
+ printf "${GREEN}ok %d${NC} - %s\n" "$_TOTAL" "$desc"
+ else
+ (( _FAIL++ ))
+ printf "${RED}not ok %d${NC} - %s\n" "$_TOTAL" "$desc"
+ printf " expected anything except: %s\n" "$unexpected"
+ fi
+}
+
+# assert_status METHOD URL EXPECTED_STATUS DESCRIPTION [DATA_PARAMS...]
+assert_status() {
+ local method="$1" url="$2" expected="$3" desc="$4"
+ shift 4
+ local status
+ status=$(http_status "$method" "$url" "$@")
+ assert_eq "$status" "$expected" "$desc"
+}
+
+# assert_contains HAYSTACK NEEDLE DESCRIPTION
+assert_contains() {
+ local haystack="$1" needle="$2" desc="$3"
+ (( _TOTAL++ ))
+ if [[ "$haystack" == *"$needle"* ]]; then
+ (( _PASS++ ))
+ printf "${GREEN}ok %d${NC} - %s\n" "$_TOTAL" "$desc"
+ else
+ (( _FAIL++ ))
+ printf "${RED}not ok %d${NC} - %s\n" "$_TOTAL" "$desc"
+ printf " expected to contain: %s\n" "$needle"
+ fi
+}
+
+# assert_json_field JSON_STRING JQ_FILTER DESCRIPTION
+# Passes if jq filter returns non-null, non-empty.
+assert_json_field() {
+ local json="$1" filter="$2" desc="$3"
+ local val
+ val=$(echo "$json" | jq -r "$filter // empty" 2>/dev/null)
+ (( _TOTAL++ ))
+ if [[ -n "$val" ]]; then
+ (( _PASS++ ))
+ printf "${GREEN}ok %d${NC} - %s\n" "$_TOTAL" "$desc"
+ else
+ (( _FAIL++ ))
+ printf "${RED}not ok %d${NC} - %s\n" "$_TOTAL" "$desc"
+ printf " jq filter '%s' returned empty\n" "$filter"
+ fi
+}
+
+# assert_json_eq JSON_STRING JQ_FILTER EXPECTED DESCRIPTION
+assert_json_eq() {
+ local json="$1" filter="$2" expected="$3" desc="$4"
+ local val
+ val=$(echo "$json" | jq -r "$filter // empty" 2>/dev/null)
+ assert_eq "$val" "$expected" "$desc"
+}
+
+# ── Summary ───────────────────────────────────────────────────
+
+summary() {
+ local suite="${1:-tests}"
+ echo ""
+ if (( _FAIL > 0 )); then
+ printf "${RED}FAIL${NC}: %d/%d %s passed\n" "$_PASS" "$_TOTAL" "$suite"
+ return 1
+ else
+ printf "${GREEN}PASS${NC}: %d/%d %s passed\n" "$_PASS" "$_TOTAL" "$suite"
+ return 0
+ fi
+}
diff --git a/t/ci/lib/problems.sh b/t/ci/lib/problems.sh
new file mode 100755
index 000000000..fe3125b39
--- /dev/null
+++ b/t/ci/lib/problems.sh
@@ -0,0 +1,44 @@
+#!/usr/bin/env bash
+# problems.sh — Inline PG problem sources for CI tests.
+# Each variable holds a complete PG problem as a string.
+
+# PROBLEM_BASIC: One numeric answer (42), no randomization.
+read -r -d '' PROBLEM_BASIC << 'PGEOF' || true
+DOCUMENT();
+loadMacros('PGstandard.pl', 'MathObjects.pl', 'PGML.pl');
+Context("Numeric");
+$answer = Compute("42");
+BEGIN_PGML
+What is the answer to everything?
+[_____]{$answer}
+END_PGML
+ENDDOCUMENT();
+PGEOF
+
+# PROBLEM_MULTI: Two answer blanks (3 and 5).
+read -r -d '' PROBLEM_MULTI << 'PGEOF' || true
+DOCUMENT();
+loadMacros('PGstandard.pl', 'MathObjects.pl', 'PGML.pl');
+Context("Numeric");
+$a = Compute("3");
+$b = Compute("5");
+BEGIN_PGML
+What is 1+2? [_____]{$a}
+What is 2+3? [_____]{$b}
+END_PGML
+ENDDOCUMENT();
+PGEOF
+
+# PROBLEM_RANDOM: Uses random(), answer = $n^2. Seed-sensitive.
+read -r -d '' PROBLEM_RANDOM << 'PGEOF' || true
+DOCUMENT();
+loadMacros('PGstandard.pl', 'MathObjects.pl', 'PGML.pl');
+Context("Numeric");
+$n = random(2, 20);
+$answer = Compute("$n^2");
+BEGIN_PGML
+What is [$n]^2?
+[_____]{$answer}
+END_PGML
+ENDDOCUMENT();
+PGEOF
diff --git a/t/ci/run-all.sh b/t/ci/run-all.sh
new file mode 100755
index 000000000..98853fec8
--- /dev/null
+++ b/t/ci/run-all.sh
@@ -0,0 +1,143 @@
+#!/usr/bin/env bash
+# run-all.sh — Build, start container, run all test suites, report results.
+# Usage: bash t/ci/run-all.sh [--no-build] [--no-pg-tests]
+#
+# Environment:
+# CONTAINER_NAME — name for the test container (default: renderer-test)
+# IMAGE_NAME — Docker image name (default: renderer-test)
+# BASE_URL — override renderer URL (default: http://localhost:3000)
+# SKIP_BUILD — set to 1 to skip Docker build
+# SKIP_PG_TESTS — set to 1 to skip PG unit tests
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+
+CONTAINER_NAME="${CONTAINER_NAME:-renderer-test}"
+IMAGE_NAME="${IMAGE_NAME:-renderer-test}"
+export BASE_URL="${BASE_URL:-http://localhost:3000}"
+SKIP_BUILD="${SKIP_BUILD:-0}"
+SKIP_PG_TESTS="${SKIP_PG_TESTS:-0}"
+
+# Parse flags
+for arg in "$@"; do
+ case "$arg" in
+ --no-build) SKIP_BUILD=1 ;;
+ --no-pg-tests) SKIP_PG_TESTS=1 ;;
+ esac
+done
+
+OVERALL_EXIT=0
+
+# ── Cleanup on exit ──────────────────────────────────────────
+cleanup() {
+ echo ""
+ echo "=== Cleanup ==="
+ if docker ps -q --filter "name=${CONTAINER_NAME}" | grep -q .; then
+ docker stop "$CONTAINER_NAME" >/dev/null 2>&1 || true
+ fi
+ if docker ps -aq --filter "name=${CONTAINER_NAME}" | grep -q .; then
+ docker rm "$CONTAINER_NAME" >/dev/null 2>&1 || true
+ fi
+ echo "Container cleaned up."
+}
+trap cleanup EXIT
+
+# ── Build ────────────────────────────────────────────────────
+if [[ "$SKIP_BUILD" != "1" ]]; then
+ echo "=== Building Docker image ==="
+ docker build -t "$IMAGE_NAME" "$REPO_ROOT"
+ echo "Build complete."
+else
+ echo "=== Skipping Docker build ==="
+fi
+
+# ── Start Container ──────────────────────────────────────────
+echo ""
+echo "=== Starting container ==="
+
+# Stop any existing container with the same name
+docker rm -f "$CONTAINER_NAME" 2>/dev/null || true
+
+# Use morbo for single-process, deterministic startup.
+# Mount fixtures at private/test/ for IO tests.
+docker run -d \
+ --name "$CONTAINER_NAME" \
+ -p 3000:3000 \
+ -e MOJO_MODE=development \
+ -v "${SCRIPT_DIR}/fixtures:/usr/app/private/test:ro" \
+ "$IMAGE_NAME" \
+ morbo -l 'http://*:3000' ./script/renderer
+
+echo "Container started. Waiting for health..."
+
+# ── Health Poll ──────────────────────────────────────────────
+MAX_ATTEMPTS=30
+POLL_INTERVAL=2
+for i in $(seq 1 $MAX_ATTEMPTS); do
+ if curl -sf --max-time 5 "${BASE_URL}/health" >/dev/null 2>&1; then
+ echo "Renderer healthy after $((i * POLL_INTERVAL))s."
+ break
+ fi
+ if [[ $i -eq $MAX_ATTEMPTS ]]; then
+ echo "FATAL: Renderer failed to start after $((MAX_ATTEMPTS * POLL_INTERVAL))s"
+ echo "Container logs:"
+ docker logs "$CONTAINER_NAME" 2>&1 | tail -50
+ exit 1
+ fi
+ sleep "$POLL_INTERVAL"
+done
+
+# ── PG Unit Tests (informational) ─────────────────────────────
+# PG has its own test suite under lib/PG/t/. We run it here for visibility,
+# but failures do NOT block the renderer CI. PG test health is upstream's
+# responsibility (openwebwork/pg). We skip directories that need external
+# services (R for rserve/, xelatex for tikz_test/) since those aren't
+# installed in the renderer image.
+if [[ "$SKIP_PG_TESTS" != "1" ]]; then
+ echo ""
+ echo "=== PG Unit Tests (informational — does not block CI) ==="
+ if docker exec "$CONTAINER_NAME" bash -c \
+ 'export PG_ROOT=/usr/app/lib/PG && cd $PG_ROOT && prove -lr \
+ t/macros t/contexts t/math_objects t/pg_problems t/units 2>&1'; then
+ echo "PG unit tests passed."
+ else
+ echo "PG unit tests had failures (see above). This is informational only."
+ fi
+else
+ echo ""
+ echo "=== Skipping PG unit tests ==="
+fi
+
+# ── Integration Test Suites ──────────────────────────────────
+run_suite() {
+ local script="$1"
+ local name
+ name="$(basename "$script" .sh)"
+ echo ""
+ echo "────────────────────────────────────────"
+ if bash "$script"; then
+ echo "Suite $name: PASS"
+ else
+ echo "Suite $name: FAIL"
+ OVERALL_EXIT=1
+ fi
+}
+
+run_suite "$SCRIPT_DIR/01-smoke.sh"
+run_suite "$SCRIPT_DIR/02-render-parity.sh"
+run_suite "$SCRIPT_DIR/03-answer-cycle.sh"
+run_suite "$SCRIPT_DIR/04-endpoints.sh"
+
+# ── Final Report ─────────────────────────────────────────────
+echo ""
+echo "════════════════════════════════════════"
+if [[ $OVERALL_EXIT -eq 0 ]]; then
+ echo "ALL SUITES PASSED"
+else
+ echo "SOME SUITES FAILED"
+fi
+echo "════════════════════════════════════════"
+
+exit $OVERALL_EXIT